Last updated: 13 April 2026
Introduction
REACT Wear is the official companion app for the DETECT study, a registered clinical research project conducted at Rigshospitalet, Copenhagen University Hospital. The app is published on behalf of Rigshospitalet by Wemuda. All personal data collected through REACT Wear is handled, processed, and stored by the REACT research group at Rigshospitalet.
This privacy policy explains how we collect, use, and protect your personal data when you use the REACT Wear app. It should be read in conjunction with the participant information and informed consent form you received when enrolling in the DETECT study.
Data controller
The data controller for personal data collected through REACT Wear is:
Rigshospitalet, Copenhagen University Hospital
Blegdamsvej 9, 2100 Copenhagen, Denmark
The app is published and technically maintained by Wemuda on behalf of Rigshospitalet. Wemuda acts as a data processor and does not independently determine the purposes or means of processing your data.
What personal data we collect
REACT Wear collects health and activity data via Health Connect (Android) or HealthKit (iOS) from your smartphone or connected wearable device. The following data types may be collected:
Physical activity and energy expenditure
Locomotion and exercise
Cardiorespiratory fitness
Blood pressure and glucose
Body composition
Temperature
Reproductive health
Nutrition and hydration
Sleep
The app does not collect GPS or location data. Your physical location is never tracked.
Purpose of data collection
Your data is collected exclusively for the purposes of the study, which investigates how everyday health data can be used to predict and prevent cardiovascular disease. The data is used for scientific research and statistical analysis only. No individual health assessments, diagnoses, or medical advice are provided through the app.
Legal basis for processing
Processing of your personal data is based on your informed consent as a study participant, in accordance with Article 6(1)(a) and Article 9(2)(a) of the General Data Protection Regulation (GDPR), the Danish Data Protection Act (sections 10 and 11), and the Danish Health Act.
Your consent is voluntary. You may withdraw it at any time without affecting your rights or the lawfulness of processing carried out before withdrawal.
Who has access to your data
Your data is accessible to authorised members of the REACT research group at Rigshospitalet. Wemuda, as technical operator of the app, may process data on behalf of Rigshospitalet under a data processing agreement, but does not have independent access to identifiable data.
Data may be shared with research collaborators in anonymised or pseudonymised form. Any transfer to recipients outside the EU/EEA will comply with Chapter V of the GDPR, including the use of standard contractual clauses or equivalent safeguards.
Data storage and security
All data is transmitted encrypted and stored on secure research infrastructure managed by Rigshospitalet. Data is analysed in aggregate and anonymised form and cannot be linked back to you as an individual. Your data will be retained for the duration of the study and in accordance with applicable research data retention requirements. When no longer needed, it will be securely deleted.
Your rights
Under the GDPR and Danish data protection legislation, you have the following rights:
- The right to access the personal data we hold about you
- The right to rectification of inaccurate data
- The right to erasure of your data (subject to research retention obligations)
- The right to restrict processing
- The right to data portability
- The right to object to processing
- The right to withdraw consent at any time
To exercise any of these rights, contact the REACT research group at Rigshospitalet (see contact details below).
Complaints
If you are dissatisfied with how your personal data is processed, you may contact Rigshospitalet directly. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
Contact
For questions about this privacy policy or about the processing of your data:
Data controller: Rigshospitalet, Copenhagen University Hospital
Study: DETECT (REACT)
Data protection officer: Capital Region of Denmark
App publisher: Wemuda